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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

Listing of Claims : 

1 . (currently amended): A network authentication apparatus comprising: 
a network interface unit connected with a network and 

trnnRmitt i ng/rocQivin Qt hat transmits/receives a packet; 

a packet relay unit for rQlavina t hat relays a received packet in accordance 
with a destination address of the received packet; and 

a filtering processing unit fnr judg i ng t hat determines w hether to relay the 
received packet to the packet relay unit or discard the packet in accordance with:4we 

one or more of a destination MAC n ririrnP . P , (Media Access Controh address 
and a destination iPwfi nridross. flnternet P rotocol version 6) address and a source 
MAC address , couroo I Pv6 address: and 

a source IPv6 interface4 Q ID. c ontained in the received packet. 

2. (currently amended): The network authentication apparatus as claimed 
in claim 1 , 

wherein the filtering processing unit )i4dges-determines whether to relay the 
received packet to the packet relay unit or discard the packet in accordance-wtth 
with: 

at least one of t he destination MAC address ,and. oourc o and the destination 
IPv6 address;.aod,-er 

the source IPv6 interface ID. 
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3. (currently amended): The network authentication apparatus as claimed 
in claim 1 , 

wherein the filtering processing unit further comprises: 

a filtering information storage unit for ctor i na t hat stores at leasts one of the 
destination MAC address ^nH murrn rflAP -^rirtmr . r . nr nniirnn and the destination 
IPv6 address , that stores the- ef source IPv6 interface iD^afldr and that stores 
judgment information representing whether to relay or discard^ in association with 
each other; and 

a processing unit fnr rnmpnr i ngthat compares: 

one of t he destination MAC address and oourco MAC addrooo or oouroo 
the destination IPv6 address , and- ef (b) the source IPv6 interface ID contained in the 



received packet wit h (a^ one of the destination MAC address and courco MAC 
-^HHrnnn nr nnurro the destination IPv6 address-er. and (b) the source IPv6 interface 
ID stored in the filtering information storage unit, and 

wherein w hen the addresses and IDs match with each other, judg i ng 
determining w hether to relay the received packet to the packet relay unit or discard 
the packet in accordance with the judgment information associated with (a) the 
destination MAC address nr the destin ation IPv6 adHress and (b) the source IPv6 
interface ID oaoh addroos . 

4. (currently amended): The network authentication apparatus as claimed 
in claim 1 , 

wherein the filtering processing unit comprises: 
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a MAC filtering unit for judging t hat determines w hether to relay the received 
packet to the packet relay unit or discard the packet in accordance with the 
destination MAC address-e f and the source MAC address contained in the received 
packet; and 

an IP filtering unit f nr judging t hat determines w hether to relay the received 
packet to the packet relay unit or discard the packet in accordance wit h tho sourco 
iPx/fi ndrirnnr. o r the destination MAC address and the source IPv6 interface ID 
contained in the received packet. 

5. (currently amended): The network authentication apparatus as claimed 
in claim 4, 

wherein the filtering processing unit further comprises: 
a filtering information storage unit fnr ntor i na that stores at least-ajhe 
destination MAC address .and r and the source MAC address or oourco IPv6 addross 
or-sQWG e the source IPv6 interface ID^and . and the judgment information 
representing whether to relay or discard^ in association with each other. 

6. (currently amended): The network authentication apparatus as claimed 
in claim 4, 

wherein the MAC filtering unit further comprises: 

a MAC filtering information storage unit for otor i ng athat stores the destination 
MAC address and-seufeejhesource MAC address and judgm e nt the judgment 
information representing whether to relav or discard^ in association with each other; 
and 
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wherein t he IP filtering unit further comprises: 

an IP filtering information storage unit for r . tnr i ng n dostinat i onthat stores the 
destination MAC addres s .and. souroo I Pv6 addrooo or_ ajTdthe source IPv6 interface 
iD-.aftd v and the judgment information representing whether to relay or discard^ in 
association with each other. 

7. (currently amended): The network authentication apparatus as claimed 
in claim 6, 

wherein the MAC filtering unit compares the destination MAC address-ef.arisi 
the source MAC address contained in the received packet with the destination MAC 
aririrftSR-Q f and the source MAC address stored in the MAC filtering information 
storage unit, and when the addresses match with each other, judgif^etermines 
whether to relay the received packet to the packet relay unit or discard the packet in 
accordance with the judgment information associated with the destination MAC 
adriress-6 f and the source MAC address^af^d,_and 

wherein t he IP filtering unit mmparfts the destination MAC address and the 
tho courco IPv6 nddr"*," source IPv6 interface ID contained in the received packet 
with the destination MAC address and th e tho courco IPv6 addross or source IPv6 
interface ID stored in the IP filtering information storage unit, and when the 
addresses-er_and interface IDs match with each other, judgiftg-detgrmine? whether 
to relay the received packet to the packet relay unit or discard the packet in 
accordance with the judgment information associated with the dQ^tin^tiqn MAC 
address and th e tho courco IPv6 addross or source IPv6 interface ID. 
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8. (currently amended): The network authentication apparatus as claimed 
in claim 1 , further comprising: 

an authentication unit for roooiv i na t hat receives an authentication request 
from an arbitrary information terminal device connected to the network interface unit 
via a network and executing authentication based o n tho basis of predetermined 
information related to the arbitrary Information terminal device. 

9. (currently amended): The network authentication apparatus as claimed 
in claim 8, 

wherein the authentication unit has -comorises an authentication information 
storage unit for ntnrinn t hat stores a user ID, password, ar»#rand.lPv6 interface ID or 
MAC address^ in nnr . nnlntnd association with each other, and performs 
authentication by comparing a.user ID. password, aRdr-and.lPv6 interface ID or MAC 
address received from the arbitrary information terminal device with the user ID, 
password, aftd^and IPv6 interface ID or MAC address stored in the authentication 
information storage unit. 

10. (currently amended): The network authentication apparatus as claimed 

in claim 1 , further comprising: 

a security control unit fnr gnnnrntinri that generates o r exchang i ng exchanges 
a key for packet encryption or decoding for each communication counterpart, using a 

key exchange protocol; and 

a security processing unit fnr nvnnnt i nn that executes a uthentication of at 
least the received packet, using the key generated by the security control unit. 
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1 1 . (currently amended): A network authentication system comprising: 

an authentication sen/er for receiving t hat receives an authentication request 
from an arbitrary information terminal device connected via a network and executing 
authentication based on tho basis of predetermined information related to the 
arbitrary information terminal device; and 

a network node device connected to the network and rniavina that relays a 
packet received from the notwork: network. 

wherein the network node device haviftfK^omprises: 

a network interface unit connected with the network and tranGmitting/rocciving 
that transmits/receives a packet; 

a packet relay unit fnr rni n yinn that relavs a received packet in accordance 
with a destination address of the received packet; and 

a filtering processing unit fnr jurir fi ng that determines w hether to relay the 
received packet to the packet relay unit or discard the packet in accordance with:4we 

one or more of a destination t^AAC^^^^idu^ (Media Access Control) address 
and a destination i^if^-^^ad^^ ^ (Internet Pro tnnol version 6) address and a source 
MAC address , oourco I Pv6 address; and 

a.source IPv6 interface-tO ID. contained in the received packett-aBd-.,.and 

wherein the filtering processing unit relays only a packet addressed to the 
authentication server to the packet relay unit, of packets sent from an arbitrary 
information terminal device that is not authenticated by the authentication server. 
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12. (currently amended): The network authentication system as claimed in 
claim 1 1 , 

wherein the filtering processing unit of the network node device further 
comprises: 

a filtering information storage unit fnr ntorina t hat stores at least-a one of the 
destination MAC address and the destination IPv6 address , that stores the-raftdr 
Gourco MAC addrosG or sourco IPv6 addrocs or source IPv6 interface ID-jaftd,.and 
that stores judgment information representing whether to relay or discard in 
association with each other; and 

a processing unit for nnmpnrlngthat comoares: 

(a) one of the destination MAC address ,and, oourco MAC addroos or oourco 
IPv6 address or and the destination IPv6 address an d (b) the source IPv6 interface 
ID contained in the received packet with (a) one of t he destination MAC address 
,and. courcc MA C addrr^'- ^'^ nrM.mn i PirR nHriro<-c- o r and the destination IPv6 
address and (b) the source IPv6 interface ID stored in the filtering information 
storage unit, and 

wherein w hen the addresses and IDs match with each other, judging 
determining w hether to relay the received packet to the packet relay unit or discard 
the packet in accordance with the judgment information associated with-eaeh 
.ui^to ^ ( a ) the destination MAC addre ss or the destination IPv6 address and (b) the 
source IPv6 interface ID . 

13. (currently amended): The network authentication system as claimed in 
claim 12, 
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wherein the authentication server includes an instruction issuing unit fef -that 
adds an instruction addition of i nformation of the arbitrary infornnation ternninal device 
when the arbitrary information terminal device is authonticatedi authenticated. 

wherein t he network node device includes a change unit fef-thaLnewly 
rogist e rina recisters t h o - MAC addr e ss or I Pv6 address or IPv6 interface ID of the 
arbitrary information terminal device as tho source MAC address or tho Gourco IPv6 
Qddross or the source IPv6 interface ID into the filtering information storage unit 
together with the judgment information representing relay in accordance with an 
instruction from the authentication servert-af^dj_aDd 

wherein t he filtering processing unit relays a packet sent from the arbitrary 
information terminal device authenticated by the authentication server, to the packet 
relay unit. 

14. (currently amended): The network authentication system as claimed in 
claim 11, 

wherein the filtering processing unit of the network node device further 
comprises: 

a MAC filtering unit fnr jufir f ina t hat determines whether to relay the received 
packet to the packet relay unit or discard the packet in accordance with the 
destination MAC address-^.andthe source MAC address contained in the received 
packet; and 

an IP filtering unit for judging t hat determines w hether to relay the received 
packet to the packet relay unit or discard the packet in accordance with tho source 
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IPvfi nririrnr . r. o r the destination MAC address and the source IPv6 interface ID 
contained in the received packet. 

15. (currently amended): The network authentication system as claimed in 
claim 14, 

wherein the filtering processing unit of the network node device further 
comprises: 

a filtering information storage unit fnr ntor i na that stores at least-ajhe 
destination MAf^ nririrnnr . address and the source MAC address , oouroo IPv6 
address or the source IPv6 interface ID in associat i on with_ and judgment Information 
representing relay or dteeafpMlsnard in association with each other. 

wherein t he MAC filtering unit compares the destination MAC address-ef_and 
the source MAC address contained in the received packet with the destination MAC 
address-or.andthe source MAC address stored in the filtering information storage 
unit, and when the addresses match with each other, }udgm§-determines whether to 
relay the received packet to the packet relay unit or discard the packet in accordance 
with the judgment information associated with the destination MAC address-er^ 
the source MAC address, and 

wherein t he IP filtering unit compares th o souroo I Pv6 address or degtingtlpn 
MAC address and the source IPv6 interface ID contained in the received packet with 
the oourco IPv6 address or riRstination M AC adHre.9fi and the source IPv6 Interface 
ID stored in the filtering information storage unit, and 

wherein w hen the addresses-ef.and interface IDs match with each other. 
jMd^iBQ -determines w hether to relay the received packet to the packet relay unit or 
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discard the packet in accordance with the judgment information associated with the 
n niirnn IPv6 addross o r destination MAC address and the source IPv6 interface ID. 

16. (currently amended): A switch apparatus comprising: 

plural network interface units connected with a network and 
transmitting/receiving packets; 

a packet switch unit for rolav i na that relays a received packet between the 
plural network interface units in accordance with a destination address of the 
received packet; and 

a filtering processing unit fnr juriging that determines w hether to relay-ajhe 
received packet to the packet switch unit or discard the packet in accordance with: 

t\A/n 

I Vv w 

one or more of a destination map nririrnnr . . address and a destination IPv6 
addfftfift . address and a source MAC addres s, oourco IPv6 addroso andi and 
a source IPv6 interface-ID ID. contained in the received packet. 
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